The scenario walks every user in Nextcloud and sets them to your chosen default roles, skipping anyone on your exception list.