adding roles and permissions