Controllerless Networks

We created a new network for the mobile devices to use and created a role that has rules to only allow internet access, with no access to the internal network (other than DHCP and DNS). It was set up to be virtual controller managed for DHCP. All of that was no problem. However when setting up the network, and we get to the point where we can choose Role-based access and select the role, I have two problems.
1. I can't see any way to change the default role from the one that was auto-created to the specific role I configured with the access rules
2. After saving, it always reverts back to unrestricted access

I found a post that it reverted back to unrestricted if the security selected was anything but WPA2, but that is what we chose and it made no difference. I also tried from the CLI but couldn't find accurate documentation for our version so I couldn't figure out the syntax. 

Version 8.5.0.10, all APs are 305

Thank you

It's not possible to change the default role. By default the name of the Role is the same as the SSID name. The only way to assign a different role is using AAA or use Role Assignment rules. 

The slider (unrestricted / network based / role based) is just a UI thing. When you select Role based, the UI just show more options. Try to move the slider to network based, now you can update the policies. These policies will saved to the default role. 

Excellent. Thank you for that clarification @WB-eb0f78