add external services/portals to roles to avoid errors with creating

users