specs for accessible_roles