fix
Hide roles using API instead of hard-coded array.
update docs.