add roles to production deploy config