added rbac rules for base modules