I want to add a dry-run so we can check first which caps are removed and added to any role
I want to add a dry-run so we can check first which caps are removed and added to any role