added role management capabilities