add roles and user groups