See http://wagn.org/wagn/wql%2Bsamples#Users%20and%20roles