POST http://rest.apinb.com/mgt/user/set_role
Content-Type: application/json
Authorization: {{BSM_TOKEN}}

{
  "user_id": 1,
  "role_id": [1, 2]
}