These Rights are typically granted automatically through policy.conf(5) to the user logged in on the workstation console. It can be, but is generally not directly assigned to a user or role.
If All is grayed, then you are not entitled to Add or Remove this right.