RBAC can be very tricky at first setting up correctly, I would practice setting all up in a duplicate test project and working out any kinks before worrying about any migrations or anything like that.
Even Jeffery in one of his videos States It's tricky at first but becomes easier once you begin learning it.
Do not take security lightly take your time and learn this stuff very well and make sure it works.