use array of roles rather than single string role