One context can only have one role, therefore roles => role