basic container memberships and roles