fix roles defaults