Users removed/overwritten from RLS roles after model redeploy

We're having a very specific issue that we're hoping someone can help with. We're in the process of publishing our tabular models to a Power BI PPU workspace to use them as PBI datasets rather than deploying them to a separate Azure Analysis Services server, and have hit an RLS-related snag on the first model.

We figured out that we can't have users assigned to RLS roles when we publish our model from Visual Studio to our workspace, so we removed them from the model and just added them to the roles once it was in the workspace. However, when we publish changes to the model, the users get removed from the roles, presumably because they are overwritten with the empty roles from the model in VS. Is there a setting somewhere that can prevent this from happening?

The only workaround we've come up with is scripting changes to the roles through SSMS after the model is deployed. So far we've only figured out how to do this manually, but would like to kick it off automatically. If we need to go this route, we were wondering if there's any kind of notification on the PBI server that is created when a dataset is published. Ideally we would find a way to run the scripts based on that. Any assistance with either solution is greatly appreciated; please let me know if more clarification is needed.