allow admins to set roles for users with no existing role