avoid NPE when roles are not specified