add additional roles to quickstart to allow REST API