Role

add role column to users
use pundit for authorization