Give application owners correct role on resource