function admin_can will always fail if has role of NONE