but then, how are we able to grant a role to a contact? i cant set it up on the contact itself, and i cant set it up on the customer either