Create learner account

New self-service signups default to learner access. Admins can upgrade roles after review.