allow the creation of default roles for the tenant