Add a role that combines both ASO capabilities and automation management, with access restricted to selected workspaces only.