Do we also need a corresponding role mapping in place for this? This is only for logged in users correct?