Web Services Create Account Operation with Entitlements

The body you originally posted looks correct, assuming roles is still the exact name of the attribute in the account schema and it’s marked as multi-valued and entitlement.