expand user-roles

Still need to add more about permission levels, recursive granting, etc.