setup common role as sample best practices