update roles

to include view permission