This was discovered by creating this role and attempting to create a workspace on behalf on a member in the UI. I was unable to do it at all, but @Emyrk said it would work if you manually paste username...

Regardless, we should fix this UX: