Assign support role and group for new users

New directory users often miss support-role tags and group membership, leaving service desk without immediate ticket access. Provision them with role attributes and group access same day.