Daniel Gerhardt authored Oct 09, 2019 and Tom Käsler committed Oct 09, 2019

* Everyone can access /health (w/o details) and /info.
* Role `MONITORING` can access:
    * /health/** (w/ component details)
    * /metrics[/**]
    * /prometheus
    * /stats
* Role `ADMIN` can access everything.