accesspoint role config almost done now