configure roles proper