Condition for more then one role

micha80 sorry, missread your issue ... There isn't something in the documentation saying you could use 'AND'. But nothing saying you shouldn't !

A quick workaround would be to add another role to the users if they have both roles, then use the newly created role in your API call.

But I would agree with PaoloT, raise a case with Lithium support to check if it's an expected behaviour.