Enabling users and roles for authorization