Run all functions in a stage under the same execution role

Hi there. I have a question about roles. I would like to set up all the functions within an application to run under one execution role.
Reading through this page

it appears that I can do this by assigning the role ARN to provider.iam.role in serverless.yml

First, can someone confirm that I’m understanding that correctly?

Second, what I actually want to do it have all functions within a given stage run on the same execution role. I.e. all dev functions run on execution role “X” and all production functions run on execution role “Y”.

Is this posslble? I can’t see any documentation anywhere that would tell me how to do this.

Thanks in advance!

Turns out serverless does this out of the box and I just wasn’t paying attention.