add roles for user