check and assign/remove user.admin