api: user roles validations