refs #18 there must be at least one Admin permission role check