Work on shib auto role allocation