user roles tweaks