moved rbac user management to separate module/repository for reusability