> I think the problem is in the NOINHERIT attribute for the abcd role.
Indeed that is the issue, thanks for helping find this out
>