The delete user and user index api routes are restricted to users with the 'admin' role.