I am using role assignments on applications extensively. When I generate a token for my API as a user, I get the roles that I have been assigned.