Yes, both auditee and auditor role can be assigned to a single user but the user can be either Auditee/Auditor for a single audit.