you'd define a role per project