add external role configuration ability