Change role with IAP

I would have to double check the queries for the RBAC queries but the functionality will be the same as the GUI editor