Can users be added with roles through an API, or another interface such as a web browser, or is the console required for all user/role management?

For this type of task, Visual Guard .Net provides winform and webform Membership API.
With these API, you can list, create, delete or grant roles to users in your code.

A web console is available wich allaows to manage users/roles.