MDL-68169 user: Add roles filter