adding certs role