test coverage around admin_role