can [:read], Phrase
      can [:manage], User, provider_id: user.provider_id
      can [:manage], User, provider_id: nil
      can [:manage], Claim, orcid: user.uid
    elsif user.role_id == "provider_user"