Add firewall roles