Changes to 'roles' call to work with LDAP