UI: add generate key button to appropriate roles