rest and roles