reading roles from X_ROLES header