Also just realised, the lookup you are doing doesn't account for users having multiple roles