enable setting of roles for user