Only the user roles that this self-service user is member of will be granted or revoked access to the resource and the rest ...