REST External and Internal are ACLs, not roles. It doesn't look like I can add ACLs directly to roles here:

thomaszhao_0-1704912408425.png