assign roles to user