The ManagementRole header contains a user role, but it doesn't include an application role. The header must include both ...