diff --git a/provision/000_base/roles.yaml b/provision/000_base/roles.yaml
index ba3946d6c..7c44b46da 100644
--- a/provision/000_base/roles.yaml
+++ b/provision/000_base/roles.yaml
@@ -1,3 +1,7 @@
 roles:
+  # placeholder, everyone role is created programmatically
+  # with a fixed ID before configs are processed
   - everyone
-  -
+  # placeholder, admin role is created programmatically
+  # with a fixed ID before configs are processed
+  - admins