Moved role constraints into model and removed edit deployment

(cherry picked from commit 7062e7e572d1bf7bf33d3403ced1b03981281de8)