troubleshooting cas role mapping