fix admin_option on role grant