<type_roles>
  <role id='Auditor'>
   <property id='title'>Information System</property>
   <property id='description'>XXX local role group</property>
   <multi_property id='categories'>local_role_group/function</multi_property>
   <multi_property id='category'>function/is*</multi_property>
   <multi_property id='base_category'>function</multi_property>
  </role>
  <role id='Assignee'>
   <property id='title'>Shadow User</property>
   <property id='condition'>python: here.getDestinationSection('', portal_type='Person') != ''</property>
   <property id='base_category_script'>Base_getSecurityCategoryAsShadowUser</property>
   <multi_property id='categories'>local_role_group/shadow</multi_property>
   <multi_property id='base_category'>destination_section</multi_property>
  </role>
</type_roles>