configure roles and apps from external sources.
iterating on role manager, #47, #51.