added more rbac doc [skip ci]