8bf9da6944
Only admin can associate roles, so we need to run that from admin cloud. Change-Id: I7229d85e5a35a2826ae06752b882b6cb54eadcbd