add db role to production env