defind user auth roles