Full roles answer in ch.accessToken