server side user roles / initial