assign and unassign roles