Allow filterable definition of custom roles and their capabilities