If machine authentication passes and user authentication fails, which role will be assigned?