proper order of roles in spec
don't send internal ids, creation dates etc. in api