Create a new role and the manages relation which connects this role to its parent POST
A user can only execute this action if he is a member of an autorizing role which has (direct or indirect) roleManagement rights for the parent role of the newly created child role.
Update an existing role PUT
A user can only execute this action if he is a member of an autorizing role which has *indirect* roleManagement rights for the updated role.
