Enclave and compliance admins should be able to create roles

[skylar-anderson]

This fixes the missing "Create Role" button and sets an appropriate default role type depending on the user's role.