[#3] Update technical design User Roles and Permissions

* API spec for role management