Note that you can limit changes to a role within site.yml