role plugin should implement defaultConfiguration()