Done specifying api for user and rules

- Get all userRoles or groupRoles)
- Create a new groupRole with or without associated permission
- Apply an exisitng groupRole to an existing user