We should have the following users roles: