Block local roles via initial JSON content