The roles section under a user on the Admin portal is not very clear as it makes mention about the desktop client even for users who make use of the WebUI. The sorting of the options is strange with the ability to be a crm user being indented when it should be the first thing you see as opposed to CRM administrator.