Returns a list of all item roles of the user that started the build. This includes roles assigned via groups. When the run is triggered by an SCM event or by the timer, the build usually runs as the System user. This user is considered as having all roles.
You can use the Authorize Project plugin to run the builds as a different user. When running as anonymous, an empty list is returned.