After removing a license, I can't delete an existing role. For security reasons, I think we should allow that, even if the deployment is no longer entitled.