adding role based access for cmd