affiliation admin now supported as a user role