(short of administrator, which did require doing each role individually rather than 'all roles' despite issues which suggested it wouldn't do the administrator.) Ref #78