How will the admin update the isEmailVerified or roles fields in the user table

How will the admin update the isEmailVerified or roles fields in the user table

Can someone please suggest a approach for the same

One way is to modify the update user validation
If we add roles and email verified fields to update user validation that will give access to the user itself to the email verified and roles fields which is not what is desired

Another approach is to create a separate API but that will lead to a lots of APIs if we keep on adding different roles which has different access to different fields

Start by reviewing the existing update-user validation and the user API described in the issue. Determine how administrator-only changes to isEmailVerified and roles should be separated from ordinary user updates, then verify that the chosen approach prevents users from changing those fields themselves.

Written by the indexing model from the issue text.