add grantable role