implement new routing for role kind; pass account to role and resource actions