access: fix holdingpenusers role definition

Signed-off-by: Jiri Kuncar <jiri.kuncar@cern.ch>