[security] Add a role button on privileges section