lookup roles with user