[PPP-3166] Locking most UserRoleDao operations to Administrators only.