The scenario walks every user in Splunk and sets them to your chosen default roles, skipping anyone on your exception list.