Add logging to `RoleUpdateService` + related

[amcclain]

There is basically no server-side logging of role changes done through the provided service. We should have logging for role management operations.