Add roles to cnames