Creating a custom role in CA Advanced Authentication