give up for now and use program role grants directly in fluent pages.