in addition, you should have another table to store membership information... of roles and users and its model class

get the membership information for specific user in LogOn action...

if the user is valid role... then display add/change users link else not

hope this helps...