add role privilege