[NX-703] External user roles mapping