Match the roles to scopes