For a role policy to function, you must enable it for Identity Server configuration.
In Administration Console Dashboard, click Devices > Identity Servers > Edit > Roles.
Select the role policy’s check box, then click Enable.
To disable the role policy, select the role policy’s check box, then click Disable.
After enabling or disabling role policies, update Identity Server configuration on the Servers tab.