user's whose role is in the roles selection are allowed to run the script