only master users can modify user roles