I just figured, that role_template does not allow you to specify "inherent from" - or at least I don't see it in the docu. So is the UI the only place or is there a way to do it with the provider?