filter mco with multi-role facts