Add roles for update and upgrade