when cloning a role which one of the following applies