RR: move roles snippet to shared namespace