Where I've used roles

• Everywhere
• Audit role
• reads attributes and values in BUILD
• then when audit is called, returns a diff of the changes