diff --git a/lib/galaxy/security/__init__.py b/lib/galaxy/security/__init__.py
index 3fb9838ca2a..13e8663216e 100644
--- a/lib/galaxy/security/__init__.py
+++ b/lib/galaxy/security/__init__.py
@@ -1391,7 +1391,7 @@ class GalaxyRBACAgent( RBACAgent ):
             self.sa_session.refresh( user )
             for role in roles:
                 # Make sure we are not creating an additional association with a PRIVATE role
-                if role not in user.roles:
+                if role not in [ x.role for x in user.roles ]:
                     self.associate_components( user=user, role=role )
             for group in groups:
                 self.associate_components( user=user, group=group )