base role with search domain resolver etc