For SSO users global roles assignment can be controlled based on attributes from the Active Directory.
Inventory roles need to be added manually afterwards. This is probably because the mapping for inventory roles is significantly more complex as it involves groups.