param: calculate server role from security, and security from server role