user roles step 2