use `role` for keter playbook