Limit the api functional by roles with Spring Security

Question

I am trying to implement SpringSecurity mechanism on my project. I have two roles: MEMBER and ADMIN. Both MEMBER and ADMIN can access to api update user, example. MEMBER can