fix permitted_roles short format