add roles and permissions