Determining user role membership