if srvs not specified, all roles returned