During crearting user without any role (see screancast in attachment), we don't have any info about needed role for new user.

When you try to log shows a confusing message "Invalid user or password" when both parameters are correct. After refresh /ez (admin route) appears on page 403.

The only way is to log in as admin in incognito mode, or in another browser and add the appropriate role.