Most users in the organisation do not have multiple logins, but may need to interact with AA in a variety of ways, e.g. Apps admin, and Analytics. Being only able to assign one AA role to each login makes role management quite awkward at times.