For most of this types of apps roles are non existent (user can perform all operations on the elements that he owns - single role). I really regret that we went with memeolist as app as it's clearly matching startup user profile where with tools like keycloak we are more corporate profile where roles are more obvious.