def get_roles(environment, access_type):
    """Gets the role arns for the specified environment and access type.

    Args:
        environment: Environment, e.g. NonProd, Prod, Stg
        access_type: Access type, e.g. Admin, PowerUser, ReadOnly

    Returns:
        String with the role arns
    """
    roles = ""

    for account in environment["Accounts"]:
        if roles:
            roles += "\n"

        roles += "{}- arn:aws:iam::{}:role/{}-{}-{}".format(
            " " * 14,
            account["Id"],
            account["Name"],
            environment["Environment"],
            access_type
        )

    return roles