Default member roles in Restricted Environments are now configurable

Default member Roles for Restricted Environments are now configurable. This effectively enables private Environments by preventing read and write access to anyone not explicitly given permission.

Admins can set the default Role to No Access, then explicitly grant Viewer or Contributor only to Members who need access.

More details in the RBAC docs.