> tell all my downstream API consumers that they need to refactor their code because we’re introducing a new value to “role” that covers “billing_manager”?

With non-exhaustive enums you don't need to do that? But also, you can match on a single variant ignoring others for the admin role check?