add role control