correctly use roles for highstate