wsgidav.dc.pam_dc.PAMDomainController.known_roles

PAMDomainController.known_roles = ('admin', 'editor', 'reader')

A DC may list these values as environ[“wsgidav.auth.roles”] = (<role>, …)