Permit update of roles