(imported comment written by JoeGasper)
Coming up on a year… The lack of full role/user management is a serious failure in the API and the use of this in a distributed enterprise environment (hundreds of roles required). Great I can create a role, but since you can’t assign computers, it’s not useful.