for user i can use admin.USER-CREATE admin.USER-UPDATE admin.USER-DELETE
for client role i can use admin.CLIENT_ROLE-CREATE , admin.CLIENT_ROLE-UPDATE
for groups i can use admin.GROUP-CREATE , admin.GROUP-UPDATE but i cant use delete operations for client role and group .
for user i can use admin.USER-CREATE admin.USER-UPDATE admin.USER-DELETE for client role i can use admin.CLIENT_ROLE-CREATE , admin.CLIENT_ROLE-UPDATE for groups i can use admin.GROUP-CREATE , admin.GROUP-UPDATE but i cant use delete operations for client role and group .