Automated changelog update [skip ci]

CHANGELOG.md

@@ -62,6 +62,7 @@ The following sections list the changes for unreleased.
 * Bugfix - Fix listing ocm shares: [#9925](https://github.com/owncloud/ocis/pull/9925)
 * Change - Remove store service: [#9890](https://github.com/owncloud/ocis/pull/9890)
 * Enhancement - We now set the configured protocol transport for service metadata: [#9490](https://github.com/owncloud/ocis/pull/9490)
+* Enhancement - Unified Roles Management: [#9727](https://github.com/owncloud/ocis/pull/9727)
 * Enhancement - Improve revisions purge: [#9891](https://github.com/owncloud/ocis/pull/9891)
 * Enhancement - Allow setting default locale of activitylog: [#9892](https://github.com/owncloud/ocis/pull/9892)
 * Enhancement - Graph translation path: [#9902](https://github.com/owncloud/ocis/pull/9902)
@@ -139,6 +140,46 @@ The following sections list the changes for unreleased.
    https://github.com/owncloud/ocis/pull/9490
    https://github.com/cs3org/reva/pull/4744
 
+* Enhancement - Unified Roles Management: [#9727](https://github.com/owncloud/ocis/pull/9727)
+
+   Improved management of unified roles with the introduction of default
+   enabled/disabled states and a new command for listing available roles. It is
+   important to note that a disabled role does not lose previously assigned
+   permissions; it only means that the role is not available for new assignments.
+
+   The following roles are now enabled by default:
+
+   - UnifiedRoleViewerID - UnifiedRoleSpaceViewer - UnifiedRoleEditor -
+   UnifiedRoleSpaceEditor - UnifiedRoleFileEditor - UnifiedRoleEditorLite -
+   UnifiedRoleManager
+
+   The following roles are now disabled by default:
+
+   - UnifiedRoleSecureViewer
+
+   To enable the UnifiedRoleSecureViewer role, you must provide a list of all
+   available roles through one of the following methods:
+
+   - Using the GRAPH_AVAILABLE_ROLES environment variable. - Setting the
+   available_roles configuration value.
+
+   To enable a role, include the UID of the role in the list of available roles.
+
+   A new command has been introduced to simplify the process of finding out which
+   UID belongs to which role. The command is:
+
+   ```
+   $ ocis graph list-unified-roles
+   ```
+
+   The output of this command includes the following information for each role:
+
+   - uid: The unique identifier of the role. - Description: A short description of
+   the role. - Enabled: Whether the role is enabled or not.
+
+   https://github.com/owncloud/ocis/issues/9698
+   https://github.com/owncloud/ocis/pull/9727
+
 * Enhancement - Improve revisions purge: [#9891](https://github.com/owncloud/ocis/pull/9891)
 
    The `revisions purge` command would time out on big spaces. We have improved