* added snapshot script
* show user or group identifier
* show role rights only if a role is selected
* check if user is alread in active role list