Thanks Skye, yea, I've been trying via custom API, the userRoles is a nested collection under USER and I've been struggling to find the right JSON structure, if there is one, to allow a POST or PUT to happen to that field. I'll keep trying and post back if I have any success but to date, not yet.