Also need to add mod/facetoface:view to the role
Also the options for "Giving all managers access to all courses" doesn't really work because the manager still needs to be enrolled.
So we added moodle/course:view to the role which skips the enrolment checks by the require_login() function.