Yes, I code functionality using Config and environment variables often, quite familiar, but thanks. I think the distinction I'm trying to make here is not hard-coding all settings into a war file ahead of time. So if, for instance, roles could first be detected by env variable, and if not found, then read from config, great. I do this too so I know it's a simple request :)