clearer and more precise directions around role and permissions