User restriction and role management