On low level (SPI) this functionality already exists and is supported internally in Repository implementation, so this is about exposing the functionality in API RoleService interface and make sure it is added to all implementations.

PR: https://github.com/ezsystems/ezpublish-kernel/pull/1056