Add workspace reader/writer roles