add/remove app roles