set up users and abilities