new role and permission settings