Ignore 'super' role, since they always get access