# Roll-based artifact installation on device

**URL:** <https://hub.mender.io/t/roll-based-artifact-installation-on-device/2894>\
**Category:** General Discussions\
**Created:** [November 27, 2020, 6:50am UTC](https://hub.mender.io/t/roll-based-artifact-installation-on-device/2894 "2020-11-27T06:50:07Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![buffo](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/buffo/32/909_2.png) [@buffo](https://hub.mender.io/u/buffo)\
**Post date:** [November 27, 2020, 6:50am UTC](https://hub.mender.io/t/roll-based-artifact-installation-on-device/2894/1 "2020-11-27T06:50:07Z")

</div>

Hi there,  
while playing around with the mender client, I wondered: is there a build-in solution for role-based artifact installation, perhaps dependent on the private key the artifact was signed with? The use-case would be: only an artifact that is signed with a certain private key can perform rootfs updates, others must stick to application updates. The logic could be implemented into the update module itself, but I wondered if this is solved in another way.

---

<div class="post-metadata">

**Author:** ![drewmoseley](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/drewmoseley/32/47_2.png) [@drewmoseley](https://hub.mender.io/u/drewmoseley)\
**Post date:** [November 30, 2020, 5:20pm UTC](https://hub.mender.io/t/roll-based-artifact-installation-on-device/2894/2 "2020-11-30T17:20:30Z")

</div>

There is nothing built into Mender for this but a custom update module could probably handle this.

Drew