Creating a custom RBAC role for administrators