Issue is due to the trust api maintaining its own list of roles, which is then called from the auth/controller
Issue is due to the trust api maintaining its own list of roles, which is then called from the auth/controller