Ensure that all roles must be granted