more structure to support roles/profiles