Configure roles instead of app