add 'on' behind roles