Templates layer onto the role defaults at resolve-time. Leave the "Applies to" panel empty to affect every membership in the tenant. Back to list →
Capabilities to layer onto the role default. Portal users are still filtered portal cage even if listed here.
Capabilities to strip from the role defaults for the targeted roles. Useful for read-only audit personas.