- PIs can add/remove tech and user roles