All users must have UserRole and Other Roles at same time ( UserRole is mandatory, but must not be propagated to repository because is connection grant and all users have it, if you propagate to repository you're setting grants to any user ). userX - has RoleX and UserRole userY- has RoleY, RoleZ an...