Goal: 

Admin endpoints should be accessible by admins only (although this is up to configuration). We need to have a policy for each of the endpoints allowing access only to users with the right role.

Acceptance Criteria:

• Admin endpoints have policies