add cloud_prep role for non-ironfan use