added group to allowed roles for ol

in 'head' section of ol definition