add role for update keys