show users with permissions