As far as I could tell, the only way I could do this is by modifying the schema (as per the example on the blog post)? What if I wanted the end-users to be able to define custom roles, I would have to modify the schema every time?