Update users.yml

Changed permission order