expose that user is external
change user levele