Deployment: app role is primary