ensure role is in allowed_roles
ensure type is in allowed_types