You probably added the user role to the user from the users tab, rather than just adding at vm level . You don't need to add the user first.