specs for role validation