Admin can grant/revoke roles ("GrantedAuthority") via "Manage User Roles" link in user listing page.
Added new role: ROLE_TRUSTED_AUTHOR.