User roles need to be passively enforced on UI.

[NTDLS]

Right now we allow the user to attempt operations in the UI that will result in an "unauthorized" exception. We need to hide these options when they are disallowed.