enable TPE only for some role?