"can i still not change the role of a User ?"
"fuckign do it"
As ROOT i open a User from the Users element, and in that User i choose the level they hold: USER or PUBLIC_REGISTRATION, the rungs the gate admits a User at
Nobody is made ROOT: there is one ROOT User, and ROOT does not change its own level (ADR-031)
A User at SUPER or ATTESTOR is admitted at no gate yet, so neither is offered
Nobody but ROOT sets a level
The act is attested as identity:leveled, naming who, the level they had, and the level they hold now