Roles on individuals can always be updated. Roles can be added or deleted but can only be as high as the current editor's role. For example: If an Administrator only has "administrator" role they cannot add any role higher than administrator for anyone else. It is possible for someone that is super administrator to remove someone else's role as super administrator and add it back. Super administrators can add any role as it is the highest-level role.

Keep in mind adding a provider role to an identity that is currently a guardian and saving it can be found and searched under providers to add any other information, for instance: the payroll ID.

To update a role, find the individual in people and indicate the role you want to add or delete and hit save profile. 

Note: Keep in mind if you reduce someone's role, that individual cannot elevate themselves. You will need to elevate it for them. In the event that no one else in the organization has the role or higher role that is needed you must put in a ticket to have that individual elevated. If you reduce your own role, you'll need someone else in the organization that has the higher role to elevate your own.