add getOwnedRoles function