Implement user_roles endpoint.
Check permissions if user has assigned user role.