[api] implement 'creator' as role for (request) events