handle server side role rejection