ConsoleMe has a native policy editor for IAM roles, SQS queues, SNS topics, and S3 buckets. The policy editor allows administrators to perform permission or tagging changes.
End-users can request permissions or tagging changes, and see context about the role.