Non-assignable roles is assignable in the permissions form

[robinharms]

If they're used as disabled options, they might still be changed or cleared.
They need to be cleared from the appstruct when saving.

Also, should they be viewable in the permissions screen? In that case, there might be a lot of roles.