Currently, roles included and excluded in the purge need to be selected separately. This hurts the general UX. Instead, we should have a switch between exclude and include and then display checkboxes with the current roles to exclude / include (depending on what is checked).
Rework the "Role limitation" Tab.