diff --git a/presto-spi/src/main/java/io/prestosql/spi/security/Identity.java b/presto-spi/src/main/java/io/prestosql/spi/security/Identity.java
index 3618f340f480..874a6af59bf0 100644
--- a/presto-spi/src/main/java/io/prestosql/spi/security/Identity.java
+++ b/presto-spi/src/main/java/io/prestosql/spi/security/Identity.java
@@ -44,7 +44,7 @@ public Identity(String user, Optional<Principal> principal, Map<String, Selected
     {
         this.user = requireNonNull(user, "user is null");
         this.principal = requireNonNull(principal, "principal is null");
-        this.roles = unmodifiableMap(requireNonNull(roles, "roles is null"));
+        this.roles = unmodifiableMap(new HashMap<>(requireNonNull(roles, "roles is null")));
         this.extraCredentials = unmodifiableMap(new HashMap<>(requireNonNull(extraCredentials, "extraCredentials is null")));
     }