provision can now update roles from any playbook