role list now passed to server (not yet handled)