... with the individual configuration modification operations, the roles could still provide a GetCurrentSettings method
BTW the roles should provide a GetCurrentSettings in any case, to make it as easy as possible to go from an experimental manually-configured server to a kickstart for mass deployment.