Add user roles defaulting to 'viewer'