Resolve #3264834 "No authenticated user"

Closes #3264834

This MR allows allows admins to add restrictions for the Authenticated User role. This is required when Layout Builder access is controlled via other means and site-wide roles aren't available. For example, when opening up LB permissions to Group roles.