Do you really have a custom role azure-issuer/4608f? Secondly, you need to switch to admin db to create it.