Assign user role on ldap login