added a script that updates 'superuser' and 'provider' roles