UI and routing for user role/permission update by admin
backend for user role/permission update by admin
minor flash message update