Extract system user creation to its own role