roles validation