ouadmin's can't read roles attribute.
src: univention-directory-manager-modules fix: 17.0.33 desc: | This update addresses the following issues: * In the experimental feature "delegative administation" one can now define writable attributes for UDM objects.
<https://errata.software-univention.de/#/?erratum=5.2x72> <https://errata.software-univention.de/#/?erratum=5.2x73>