Proper role configuration