added role privileges