Provision roles from a central server