Is it possible to assign roles without giving the user log in access first? I swear this used to be possible, but I have tried this in two environments today, and both times I am unable to assign a role if they do not have access, and if they do have a role it is removed when access is removed