This role sets acls that permit unprivileged users to: - write inside a list of directories - restart the tomcat instances (default). Or manage other services.