...
In the column DVI Roles you can see which role the user is assigned to. This reflects the users membership in the Active Directory group, and can not be altered for the individual user.
Locking out a user
You can uncheck the Is approved column to temporarily lock a user out from the system.