ignore tenant roles should be an array