remove ability of user to change role