If a role is already in a plan return a 409

Change-Id: Ib2eb78c554bc15e73d57a6fe83a69eb5afcf7456