authorization role cycles2