Grant Roles for Children of this Object to Principals
Role
Users/Groups
Manager
User xy
...
Grants for the selected principal
Roles
Allow
Unset
Deny
The Label
roles widget
^ top