For a role policy to function, you must enable it for the Identity Server configuration.
Click Devices > Identity Servers > Edit > Roles.
Select the role policy’s check box, then click Enable.
To disable the role policy, select the role policy, then click Disable.
After enabling or disabling role policies, update Identity Server configuration on the Servers tab.