You could always provide one default role, and then if they need to transact with other subsidiaries - an alternate role they could switch to.