Make sure that a user assigned ProgramOwner role can read Roles.