direct vs. inherited roles form basis for consistent role management