User can add/remove roles.