The role being passed is most likely not valid or missing. 

This is caused by spelling errors, not being assigned to a “cloudhealth-” group, or “roles” attribute name is missing/spelled incorrectly.