set roles on connect endpoints