How do I trigger the conditional assignment of apps for existing users? For example if I have an employee that has been promoted to a manager I will need to change their designation and add them to a new group - can this trigger a change in their roles/permissions to specific apps if the conditions are already in place ?