Changes take effect at next sign-in. Greyed boxes are inherited from a parent role and cannot be cleared here.