Now returning users not PrincipalRoleRelations objects