Add "roles" to users admin API