Click to choose module and action or write the path directly and click
You can use * wildcard to allow/deny multiple modules.
Ex: content/* will apply for all content modules like post and page add/edit, menu categories etc
To deny saving for content modules use content/*/save this rule will apply for save actions for content modules, and editing and adding posts/pages/categories etc will be denied.
To deny delete for all modules use */delete this rule will apply for delete actions for all modules.
Allow list is checked first then the deny list, if a rule allows access a deny rule can limit it.
For example you can add access to products section with products/* and only restrict product categories and delete with products/*/delete and product/categories deny rules.
With plugins/* you can restrict or allow access to plugins section and all plugins settings.
With plugins/insert-scripts you can restrict or allow access only to a specific plugin.