Working with cloud IAM – grant a role