oh it's just the documentation that's wrong. you can now set rbac role names, not only ids, at rbac_user