that screen shot is from sandbox. yet, the same user who does have live access can actually login using sandbox role. he previously did have a role in sandbox, but as u can see, it's now blank