Role access grant route updated to be POST