read role name from web.config