Support G-RBAC when a team is using SSO managed group access

[hardillb]

Description

As a Team Owner
I would like to make use of G-RBAC even when team membership is controlled by SSO
So that I can limit users access to specific Applications

Which customers would this be available to

Enterprise Tier Only (EE)

Have you provided an initial effort estimate for this issue?

I have provided an initial effort estimate

Requested by:

https://app-eu1.hubspot.com/contacts/26586079/record/0-2/10735683795

[knolleary]

The current common prehandler for teamMembers.js is blocking the api request here. It remains a valid block if trying to change the team-level role; but we should consider allowing the request through if its an g-rbac update request.