Fixes #3128: Fixed the bug that `defaultRoles` set in RBAC manager was not working as specified
Fixes #3127: added more doc [skip ci]