tagging a AWSReservedSSO role wit SSMSessionRunAs

Hi, I'm working with AWS SSO based on Jumpcloud external Idp. I'd like to find a way to put the tag SSMSessionRunAs tag to the AWSReservedSSO role created by SSO into AWS accounts. If I try to put the tag directly I receive: "Cannot perform the operation on the protected role 'AWSReservedSSO_xxxxx' - this role is only modifiable by AWS"

Someone know a way to do that ? Or maybe a "plan B" or a way to add the tag SSMSessionRunAs ?

Thanks a lot Dario