added new role "office administrator" the only one allowed to create users, trunks and policies.

also, when the office is created the first user is now created with this new role