Examine existing OpenAPI controllers in the Apollo codebase, such as those in the admin service and config service. Understand the current permission model (roles like admin, owner) by reviewing classes like PermissionService.java and RoleController.java. Look at the CreateApp endpoint that already allows configuring admins and owners. Then propose new endpoints for updating user permissions on apps or namespaces, ensuring alignment with existing REST API patterns.