add user/role for securing inventory app