MDL-31127 init USER->access when switching roles