path "auth/token/roles/*" {
  capabilities = ["create", "read", "update", "delete", "list"]
}