create users and user permissions