entity roles