wsgidav.dc.nt_dc.NTDomainController.known_roles

NTDomainController.known_roles = ('admin', 'editor', 'reader')

A DC may list these values as environ[“wsgidav.auth.roles”] = (<role>, …)