You can unassign a role from an admin account by calling this endpoint. To use this endpoint, both write:admin_account and read:config_identity_store scopes should be granted. The Admin role cannot be unassigned from the last admin account.