Get all the applicable roles for this user with a UNION query of all defined criteria: userId, resourceType, resourceId