lookup -> role