introduced max role for authentication action