Hi Sam,
1. Changing the VRRP role without shutting the VRRP instance on Master is not possible in this scenario.
2. If you can point the LMS / Backup-LMS IP to the actual interface IP address instead of the VRRP IP, then you can failover the APs between the controller by changing the LMS / Backup-LMP IP address.
Thanks,
Rajaguru Vincent