Currently site-wide roles have various permissions related to organizations features: - members - groups - custom roles - idp-sync - provisioners - org settings These permissions are not mentioned when assigning roles. <img width="319" alt="Image" src="https://github.com/user-attachments/assets/d6af5a0b-d565-416a-a9fe-f932db53a518" />