make provider roles mandatory for user accounts