or you need to check the role directly