Add firewall role