Allow roles to be managed in the User region
Users have no roles in the network context, so don't let them be managed.