Hi @lisa4, I know it's an old thread, but in case you haven't resolved yet here is an idea to your issue:
create a real-time workflow against your record, and in the workflow use the existing actions to associate/disassociate the Web Roles you need.. I just did a quick test here and worked fine and on-the-fly, no need to sign-out or clear cache
------------
If you like this post, give a Thumbs up. Where it solved your request, Mark it as a Solution to enable other users find it.
