adding user mgmt capabilities to admin role