To allow custom permissions per an identity that would allow that identity to be assigned to a oxide group or user.