adding/removing user roles from a project