At present the enrol ajax behind the UI uses $plugin->enrol_user($instance, $user->id, $roleid, $timestart, $timeend);

This is very wrong, you must explicitly ask the plugin if it allows manual enrolments. At minimum you would not be allowed to unenrol, but it could create severe other problems or break synchronisation.