Update User Roles/Sites via SSO, SAML, or CSV

Update integrations to allow for create read update and delete for users. Such that when a user enters an integration group their role and sites update.

Example case: Joe is promoted from staff member (role requester) at primary site to principal (role building admin) at secondary site. Joe should lose requester role at primary site and be granted admin at secondary site.

Further extend this to allow approval paths. If this is too complicated, an override CSV with email, role, and approval paths that can be sent with updates would accomplish the same thing. joe@district.com, requester, primary => joe@district.com, admin, secondary.