User roles functional permissions for session user