The scenario walks every user in Microsoft Entra ID and sets them to your chosen default roles, skipping anyone on your exception list.