From the workspace user interface a workspaceowner can assign users to the workspace researcher role. The workspaceowner must also be able to both add and remove users. This will require changes to both the UI and API.

Need to consider the adding of groups.

Need option to disable user management APIs (don't add APIs to the router)