Return a 404 for invalid UUIDs when adding roles

Change-Id: If84f38f11d0afd25e1ebccb3a108edbe06a2929b