Request to support granular permission control where users can have mixed access within the same role/group setup. Specifically, users should be able to have update access for selected articles/categories while maintaining view-only access for others, even when multiple groups are assigned. This should also work consistently with MCP/Copilot-based access without being restricted by the least-permission rule.