ensure default scopes are available for users with no role assigned