You can use the following API to change the User level of an identity
{{baseUrl}}/v3/auth-users/:id
with PATCH request and body as below:
[
{
"op": "replace",
"path": "/capabilities",
"value": ["ORG_ADMIN"]
}
]
To automate the process you can create a workflow that will send a request to this API with id
of the identity.