add permission and role