add super admin restrictions in user management