Allow custom roles to be specified

The PR allows users to specify a custom role name for ACLs.

/to @bajtos 
/cc @ritch