More options for restricting available roles
Improved mapping logic
Updated list of denydeletes