ROLES_FOR_EDIT defaults to [ROLE_ADMINISTRATOR]