Fixed entrust 'role' config