access wildcard fix for role setup