Alter control_users view to add vbo operation Modify user roles. Add form alter to prevent role escalation to administrator.