update role mappings