employee/user differentiation