add role and authority