If you have selected to apply further restrictions, the checkboxes under that permission will remain unavailable until the header permission has been ticked. You can now apply further restrictions.
Once restrictions have been applied the header permission will be labelled “Restricted’.
From this screen, you can either create a new role or delete, disable or edit the role being viewed.