change to list user to get arn so it also works with roles