ALM-282 updated role permissions