If you update a user’s roles, the online help instructs you to flush the EAServer permission cache, but this is no longer necessary.