do not downcast roles because the standard wants them uppercase