Which two security elements should you add to the security role?