binford2k: from the module point of view, I'm not sure the definiton seems blurred with server.pp supportig the creation of roles which is not part of setting up a server, if defining a role is part of server.pp then I'd suggest defing that roles permisisons would also be appropriate