Add a service role and a nested service role