afaik you have to make a separate role