Fixes #3128: Fixed the bug that `defaultRoles` set in RBAC manager was not working as specified