read roles as ajax call