updated to only show roles that are set to be visible in selfservice