auth role enhancements