allow roles to be selected