1. Grouper
2. GRP-675

consider adding an 'add user to role' checkbox on the permission assign screen so the admin doesnt have to navigate to the membership screen