add user authority