reqd_mask/roles_decl

role r;