make sure @role values are lower case