and roles, as opposed to the permissions claim when enabling RBAC core, aren’t available as root claims for access tokens (or ID tokens).
What’s the reason that you need the roles claim as root claim? Is it because the SDK you’re using to validate token and claims expects the roles to be exactly there, as root claims? Any additional context is helpful to understand your use case and need for this a bit better.