final changes to iam role manager