Moved role constraints into model and removed edit deployment

(cherry picked from commit 8b54013e59972d38d4dfff9ba1f807e642e66412)