Construct Rbac object from identity roles