The roles you're assigned come from the trusted Provider's identity assertion. The sample OP comes hard-wired to assert membership in the Admin and Member roles.