I just created sample application in Grails 3.3.11 having two user roles i.e ROLE_USER & ROLE_ADMIN(ROLE_ADMIN > ROLE_USER) and I created one simple controller called sec