I would like to set up SSO for the education management platform, which requires that users be enrolled in Blackbaud ID authentication within Core.  Rather than manually filtering and selecting users to be enrolled, I would like to see an option to have users automatically enrolled in Blackbaud ID authentication by role so that users can be enrolled and unenrolled in SSO/Blackbaud ID auth as their roles change.  This would avoid lots of manual interaction with user enrollment as students or faculty members come and go.  It is most important for alumni who lose their IdP accounts after graduation, but who may still wish to access their alumni records in Education Management.  An automatic change from "enrolled" to "not enrolled" based upon their role changing would avoid unintentionally removing access completely, as would be the case when their IdP account vanishes.  If it remains a manual process, it is more open to human error.