How roles are assigned or updated