Make sure the organizational_permissions table is included when
filtering on roles