add a new role 'administrator' and its operations