compiled rbac access assign