Caution: app-role has admin privileges to circumvent the rest extension issues when application-level access is enabled