I've seen this issue before and had to use the same workaround (enable/disable roles), but no one has reported problems with that recently.
One thing I still think that should be considered a bug is when you try to generate reports. There is an option to search users by role, but if the role is inherited it does not return anything:

------------------------------
Paulo Mesquita
Spark NZ Trading
------------------------------