When the IsPrivate binding is enabled, only users and roles listed in the Assigned To and Assigned Users (multi-assign) can access the form instance. We would like to stop non-admin users from being able to remove roles or users that are already o...