I want to just check permissions in a similar way the client organization offers - is there a way to get the "roles" from access control?