remove debug, setup ds roles (replace ds_user)