Web UI: exclude empty unused roles. Refs #2776