set a role and execute as admin so only those roles have access to the script but it still executes as admin