adding role for certificates