Change role with IAP

In my opinion, altering a user’s role via a REST API may not be the most secure approach. Instead, it is advisable to make such role changes within the Strapi backend controller for enhanced security.