user roles per domain and design