expose scoped roles for user