* DynamoDB UserRole table (userId: string, roles: string[] ) * GraphQL: top level query for User(id?: optional) * If id isn’t provided, current user id is used * Current user has access to his user model, obviously * In future, admin or other role may be able to query a user object