Support for additonal role membership controls