Use another roles store as otherwise filtering on main store affects roles available in settings
Implement role tree for role/users