Role scopes REST routes