pub fn capability_grant_set(role_name: &str) -> Value
OCP Part 2 grant set for a role: which capabilities the subject holds.