Happy to hear we got the original issue sorted out! The role is required when generating the Web SDK signature, so maybe that is where you saw the role in the docs.
Now, for your Signature Expired issue, checkout this post here and let me know if it fixes the problem:
