add default role "App Viewer" to new user