more commits to make roles configurable via attribute