role config for query sp