When a new user is created and roles assigned, the options of either Grant access to all organisations or specific should cascade through all roles added. This selection is usually correct for all other roles.

It should also default to specific rather than all organisations, with the entity being used the one that determining the one access is granted to by default