RoleMembershipSelectorWhen present, specifies that the Role is to be granted to Identities which either satisfy specific criteria or which are members of a given list of Identities.