add service role to deploy_tags