@Kris why not just remove the access and role save the record then edit the employee record and add the new role