Clarify that it doesn't iterate over all roles, but enables them

Clarify that it doesn't iterate over all roles, but enables them #414