allow user-role with write_level2 to assign user_role for his level to
other users