expand list of allowed users