diff --git a/.vscode/launch.json b/.vscode/launch.json
index b77f3b95..fcc80a75 100644
--- a/.vscode/launch.json
+++ b/.vscode/launch.json
@@ -53,7 +53,7 @@
         "AYANOVA_FOLDER_USER_FILES": "c:\\temp\\RavenTestData\\userfiles",
         "AYANOVA_FOLDER_BACKUP_FILES": "c:\\temp\\RavenTestData\\backupfiles",
         "AYANOVA_FOLDER_TEMPORARY_SERVER_FILES": "c:\\temp\\RavenTestData\\tempfiles",
-        "AYANOVA_SERVER_TEST_MODE": "false",
+        "AYANOVA_SERVER_TEST_MODE": "true",
         "AYANOVA_SERVER_TEST_MODE_SEEDLEVEL": "small",
         "AYANOVA_SERVER_TEST_MODE_TZ_OFFSET": "-7",
         "AYANOVA_BACKUP_PG_DUMP_PATH": "C:\\data\\code\\postgres_13\\bin\\"
diff --git a/docs/8.0/ayanova/docs/svc-workorders.md b/docs/8.0/ayanova/docs/svc-workorders.md
index 4e994084..6be3bfa7 100644
--- a/docs/8.0/ayanova/docs/svc-workorders.md
+++ b/docs/8.0/ayanova/docs/svc-workorders.md
@@ -35,6 +35,7 @@ docs / sections required
 
     * Work order *Item* restrictions    
         * Theser Users will only be able to access the Work order Items for which they are Scheduled in the work order editing form.  In other words if you do not want a Sub contractor or tech - restricted user to see parts of a work order do not add them to the Scheduled users collection on those work order items
+        * Reporting convenience field: IsCompleteRecord field is included with the report header data to indicate if any items were removed due to restricted user
 
 
 * Work order Cost field restrictions 
diff --git a/server/AyaNova/biz/PrimeData.cs b/server/AyaNova/biz/PrimeData.cs
index 81b4034c..febb2067 100644
--- a/server/AyaNova/biz/PrimeData.cs
+++ b/server/AyaNova/biz/PrimeData.cs
@@ -25,7 +25,7 @@ namespace AyaNova.Biz
             u.Salt = Hasher.GenerateSalt();
             u.Login = "superuser";
             u.Password = Hasher.hash(u.Salt, "l3tm3in");
-            u.Roles = AuthorizationRoles.All;
+            u.Roles = AuthorizationRoles.Accounting | AuthorizationRoles.BizAdmin | AuthorizationRoles.Inventory | AuthorizationRoles.OpsAdmin | AuthorizationRoles.Sales | AuthorizationRoles.Service  ;
 
 
             u.UserType = UserType.NotService;