added roles class for tenants_api