New accounts get access once an admin assigns a role.