add permissions and roles