Add user permission to assign roles