fixed privileged roles