make sure role settings make sense...