removal of user roles, support for non-security functionality