assign selected roles.
updated add/revoke group/role/permission