public Collection<String> getRoles() {
        return authzInfo.getRoles();
    }
Returns <code>this.authzInfo.getRoles();</code>

@return the Account's assigned roles.
core/src/main/java/org/apache/shiro/authc/SimpleAccount.java