!roles uses var.role_order also (useful with !roles #)