adding a role to the nat instance