Whoops, was getting all roles instead of just the required ones