Adds and/or removes sub-roles from a role. A role inherits permissions and data access from its sub-roles, so this endpoint is how that inheritance is wired up - this is an incremental add/remove operation, not a full replacement of the sub-role list.