add configuration roles