It is best practice to assign at logon/logoff, ensuring their is no contention with the application or any underlying files.

With that said, I have sometimes forced the assignment to test users on the fly, but only to users who understand the issues with doing this.