public void UpdateUserRoles(User user, List <string> roles) { var currentRoles = _membershipProvider.GetRolesForUser(user.UserName); if (currentRoles.Contains("Administrator") && _membershipProvider.GetUsersInRole("Administrator").Count() <= 1) { return; } if (currentRoles != null && currentRoles.Length > 0) { _membershipProvider.RemoveUserFromRoles(user.UserName, currentRoles); } _membershipProvider.AddUserToRoles(user.UserName, roles.ToArray()); }