ensure log access before executing role