updated roles for api-keys