Map memberof to role with role label (without prefix)