bit mask for roles