Changing roles after api key creation?