add: set user role and delete users