Assign policy to roles