add RBAC capabilities

at the moment any user that logs into the Fuse Online console has access to the whole set of functionalities. It would be nice if we could restrict visibility over sections or limit actions based on the user role in the oauth token (for example non admin users are not allowed to delete or change connections).