added separator to allowed roles for li