GBE-455: add AdminAssignmentCommand for (un)assigning admin role