qa rbac setup