setup roles