users are updated by the admin or anyone else who has the rights