Map roles to REST API : How to do role validation for REST API's.
  I have 2 roles called "admin" and "manager" 
  REST API's : /users -> POST
               /users -> GET
"admin" role can access both the API's but "manager" can access only GET API.