* validate that a user can add a role before adding them * support deletion of non-required metadata attributes via null