You can now use Identity Provider Role Assignment to update the “role” on the user’s Organization Membership. Role assignment is available on the Admin Portal where the admin can map group membership to a role which will then be accessible on the Organization Membership for the synced users. You can learn more here.