Using domain inherited role to check v3/role_assignments