made role work with defaults