adding rules to assign/remove staff role following create/delete of staff profile on the user