allow to query all users with a given role