Initial implementation of capabilities and roles