adding user association, proper listing of user roles, and locked icon