simple role assignment logic