To add roles in iP: 

Assigning a role to a user