make environment/service/role optional