Just one role per user.