If I assign them administrator role, they are able to login , but not with any other.
I remember from one of our call with client, when any other role apart from admin was assigned to anyone, that went through some approval process, then only that role was granted to any employee.
As an admin I should be able approve the role , but don't know where to do that?