accessible roles for new & edit user views include group manager
dont show hand over button REFACTORED
access right management backend WIP