otherwise, if you're just going to be assigning single users, you don't need the

role

type