rename role to have a dash instead of an underscore