SENTRY-132 - Implement APIs that grant/revoke roles to groups (Brock via Shreepadma)