the 2 general choices are choosing current role to run the script using the same role as the current user