update functional RBAC