Allow authentication providers to control user and team role changes
Merged #191 "Allow authentication providers to control user and team role changes"