get all roles

This can only be done by a logged in user who has the required privileges.