#1 - a user can have a default role using 'user.default_role'.