set up oauth config and resource validator for respective roles