assigning roles to users