check if existing user already has access to instance

if the user already has access to the instance then we don't want to add
a duplicate permission so check and display a message if that's the
case.