User Roles are refreshed by any of the following methods:

1. A supervisor edits a user in Administration > Users and clicks the option 'Refresh Now'
2. The scheduled Role Refresh service runs as defined in Administration > Configuration > Role Refresh.