grant or revoke role for users challenge