added :manage_rbac and :manage_users permissions to either view