Hi Jeremy,
I hit this issue just recently. SAP re-wrote these transactions. They use component that is not visible in batch input session. Hence you can not add roles to a user. As a workaround for LSMW you can switch from batch input to BAPI and generate IDocs that will create new users.
Cheers