Enable no-session role for always allowed action

PLAT-1391 #time 1h