ensure role_flow before update