make niet roles a variable so that apps can specify additional roles if required