It seems to me like the range of possible attributes is way, way, waaaaaay higher than the range of possible roles, which would make attribute-based management phenomenally more complicated. Sure, cloud systems don't focus as much on operating system roles; however, on the user-facing side, they are still built around administrative roles.