Configurable roles for replay download permission