They tell us not to alter the system roles and make custom roles from the system roles instead. yet, they paint us into a corner with the web services problem presented above. Hell, you can't even record.load() an employee in the Admin role.