getting roles with permissions