superuser and owner can change another user's affiliation to the room