team member update should only allow roles view and none