Added user role checking to mmsch
Split user roles according to LDAP attribute