LPS-46353 Keep the "allRoles" attribute since it's part of the contract for 3rd party developers who are providing custom impls of that JSP from a hook.