more cli work in the area of roles