If you nest your resources as you do, then
the url will need all parts of it like:

user_role_path(@user, role)

As parameters it takes the resource ids as default,
so you don't need the :id and the :user_id here

and don't forget that you can use rake routes to see all your
available routes at any given time, and their corresponding
controllers and actions.