User#roles should be calling Service#list_roles_for_user_on_tenant directly and not use Roles#all since the latter is actually a method for getting all roles in the Identity Service