When a user logins into the system (or gets current user info), needs to know his/her roles. It is better to return list of all roles in result too.