Don't try to add role if user already has role in tenant