Propagate write once fields for modifying RoleAssignments #5063
Description
Describe the current behavior
There are fields on RoleAssignments that are WriteOnce but we allow the users to change them today. It would be great if we could flag the fact that they are write once and give an earlier error rather than attempting the change and then failing.
Describe the improvement
Add CEL validation rule that prevents this?