Check no access role if user has unlisted roles

An example of such a role is ProgramOwner
Merge pull request #995 from reciprocity/feature/check-no-role-option

Check no access role if user has unlisted roles