when you run the getlic are you running it from nsh? how did you launch this nsh?
you should do a 'nsh here' from the CM GUI on a server that is licensed - that gets you into nsh w/ bladelogic credentials and assuming that role:user combo has entries in the users.local file on the target agent you should be able to run the getlic.
also look into 'autolic' which will do the getlic, talk to the site and then putlic
additionally, you can create a nshscriptjob to do this and just run it from the gui.
Don't forget you can also do it as a custom command. The only drawback is that you'll be typing the password in cleartext in the GUI when you run it.