1. configure extension rights & users