Use userid as principal