diff --git a/questions.yml b/questions.yml
index 1748672841e31bdd3b24dc7d4bdcf0ed3e8a4a82..03e65ef96f878693020566ec9df6ba49491c5bbb 100644
--- a/questions.yml
+++ b/questions.yml
@@ -26,8 +26,9 @@ questions:
     label: "Name of the pluto deployment in the namespace"
   - variable: sso.role_einheitlicher_ansprechpartner
     group: "Other"
-    type: string
-    default: "false"
+    type: enum
+    default: "true"
+    options: ["false", "true"]
     label: "Add role for EA"
   - variable: sso.apiPassword
     group: "Other"
diff --git a/unit-tests/keycloak_client_test.yaml b/unit-tests/keycloak_client_test.yaml
index f7b542a4bfb29686a4923eaa4c88b020ff9322a3..8f53068828a9ea3eaac866ccd32255f40e50dd6f 100644
--- a/unit-tests/keycloak_client_test.yaml
+++ b/unit-tests/keycloak_client_test.yaml
@@ -23,6 +23,17 @@ tests:
           content:
             name: EINHEITLICHER_ANSPRECHPARTNER
             clientRole: true
+  - it: role_einheitlicher_ansprechpartner adds the role in the client object
+    set:
+      sso.role_einheitlicher_ansprechpartner: false
+    asserts:
+      - isKind:
+          of: KeycloakClient
+      - notContains:
+          path: spec.roles
+          content:
+            name: EINHEITLICHER_ANSPRECHPARTNER
+            clientRole: true  
   - it: role_einheitlicher_ansprechpartner is not set at default
     asserts:
       - isKind: