Turns out access to eSignature is tied to the admin and master admin roles and cannot be added to custom roles.
