MS22-65: Define user role rules.