security role add to config