Implement role separation