Don't assume role_ids existence

Bump into this using a custom role_cname.

I read through the specs but couldn't find where this is tested nor understand how to test it with them. I'm not very fluent with those, so sorry for the lack of tests.