partial rollback credentials