match based on roles