See [the MarkLogic docs](http://docs.marklogic.com/REST/POST/manage/v2/roles) for what a role JSON/XML file can contain.