assign roles