initial RBAC for contacts page