improve role configuration on server side