Issue #3 - update roles and permissions doc