added API for admin(Rights, Roles, Position)