CLOUD-216 user roles should be an enum instead if strings