/entity should only query for person / role objects