diff --git a/refpolicy/policy/users b/refpolicy/policy/users
index 2e31598..33bde93 100644
--- a/refpolicy/policy/users
+++ b/refpolicy/policy/users
@@ -6,7 +6,7 @@
 
 # gen_user(username, role_set, levels)
 define(`gen_user',`
-	user $1 { $2 } ifdef(`enable_mls', `level $3 range $4');
+	user $1 roles { $2 } ifdef(`enable_mls', `level $3 range $4');
 ')
 
 #