diff --git a/manifests/site.pp b/manifests/site.pp
index b3319bd..cc02727 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -38,6 +38,11 @@ File { backup => 'main' }
 # specified in the console for that node.
 
 node default {
+  #incude a role on any node that specifies it's role via a trusted fact at provision time
+  #https://docs.puppetlabs.com/puppet/latest/reference/lang_facts_and_builtin_vars.html#trusted-facts
+  #https://docs.puppetlabs.com/puppet/latest/reference/ssl_attributes_extensions.html#aws-attributes-and-extensions-population-example
+  include $trusted['extensions']['pp_role']
+
   # This is where you can declare classes for all nodes.
   # Example:
   #   class { 'my_class': }