allow :organizer and :supervisor roles