adding role lockouts