optimise artifact roles resource to avoid calls to findUser where
possible