tambah service role, buat controller role