do you want fully user-defined roles or a pre-defined set?