cater for user details but not roles