set up roles