Mask roles to see the system with a more limited set of permissions