I don’t see that working.

If I do as you suggest, to ‘grant’ the subscriber role as primary, the result is that all other roles are removed.

I’m actually looking for the opposite – remove the subscriber role and keep all others.

The challenge is that the users in question have a variety or role combinations. That all needs to stay. The only thing they ALL have in common is the Subscriber role as an additional capability.

any thoughts?