managedByRoleDefinitionId