[Feature Request] Allow all clients except some in roles

[lqdmist]

Is your feature request related to a problem? Please describe.
Currently when we add a new client including multiple sites, we have to manually add these clients / sites to the correct roles since we do not want to allow all clients to our engineers role.
We have a super admin group which includes permissions to certain sites where no one else can have permission to, so this means we have to select all clients / sites for every role that is not super admin. Mind that we currently have 170 clients with multiple sites so this is a lot of manual click work.

Describe the solution you'd like
Instead of selecting all clients / sites, add an option to allow all clients and or sites except for the selected ones.

Additional context
This feature would save our super admins index finger a whole lot of click work.

[P6g9YHK6]

#2053

If I was in your shoes I would make a script to add to the new site id to a predefined list of roles until the deny group feature is implemented.