Cannot use query param for set role. Concat should be safe though