In addition to having "Users who can access this Space", it would be very helpful to also have a "Users who can not access this Space". It is easier to exclude groups, than it is to continuously manage a giant inclusive group. Example: We have company employees. We also have vendor staff augmentation. I have a group for the external resources so that we can limit access/permissions. But creating a company group, where I have to add new employees all the time, would be a hassle. Would be nice to be able to add "MyTeam" but exclude "group 1".