Right, you cannot add any other roles to snc_internal. It should be stand-alone role. That's how SN implemented this

View solution in original post