changes to reimage, verify roles provision