Hello
I´m facing this problem… Topic` Still don´t we have a practical solution for this? I´m developing an app with EASILY +50 entities and more than 10 roles for different employees… Do I have to assign the entity access one by one for each role ? 
because obviously I don´t want them to have access to all the entities.
Thank you
Hi,
No, there is still no way to “assign to a role all grants except one”. This is done intentionally. Security is a crucial part of the application and all grants must be assigned explicitly. What can simplify your life is “child roles”. You can combine roles together either using “Child roles” section in the runtime role designer or by extending role interfaces if you define roles in design-time.