You can update a default user role set for users on first login by setting DEFAULT_ORGANIZATION_ROLE in /app/data/env.