get user from EnvironmentContext to resolve roles