add LdapClient for fetching user's roles