Ensure role name unique within realm/app