Update iam-policy role to create roles and users