no DLP for list-role