Because accounts might grant and revoke roles dynamically, it is not always possible to determine which accounts hold a particular role.
Ressource: https://docs.openzeppelin.com/contracts/4.x/access-control
Is this a typo? In which cases is it not possible to determine the roles of a given account?