[389-users] documentation on creating/using roles