@jen, how are you calling the RESTlet? runtime module has user.roleId. Even if this isn't accessible in the RESETlet itself, if you are calling from a UE or CS then you can runtime get before the call and pass it as a parameter to the RESTlet.