maybe "system role" should be a glossary entry.