Roles provided by sandpit enrolment keys can be changed by unenrolling and re-enrolling with a different key.
Roles that are provided initially during sandpit creation cannot be changed. The same enrolment key can be reused if you unenroll.