user can be created by manager