I would like additional control over RBAC roles through the REST API or the Terraform provider. We will likely start managing roles & membership via SCIM provisioning, but we would like to manage role permissions and access via Terraform.