Rbac backward compatible

no longer true, just roles now