waf roles and responsibilities