Upon further inspection it appears that the onSaveUser may not work for what im looking for…
The function works. I can reject saves based on the user role but it seems to be based on the role that the user is currently assigned to, not what is selected in the role boxes when creating or editing a user. Are their functions to access those specific check boxes?