pub fn parse_role_map(list: &str) -> Result<Vec<(String, Role)>, String>
group=role entries (comma-separated): a group (or an email address, or * for anyone signed in) → role. First match in order wins.
group=role
*