strip domain for roles