fix role service access functionality for getting root containers by privilege