Changing an MSP user's role should not require us to delete and re-invite the user.

Some options for SDKs with robust SSO/RBAC, with many of these built in features are Auth0, WorkOS, etc