regex searching for roles and permissions