also, I generally try to use the same role in sandbox that I will deploy with in production, otherwise things may work in the sandbox, but then you may find yourself unable to deploy in production later because of role differences.