base role required by all servers