test add role in policy