role argument to audit_role should be optional