Principals roles must be set even if optional field is empty