Role management is fragile at best
Currently roles are managed as strings, they used to be managed with a dedicated type yet cobra compatibility was an issue.
This is fragile at best, and already caused a couple bugs, we should switch to some kind of enum, and maybe more complete role mapping logics.