regarding Expanding User SSO IDs

-- Can anyone tell me why the permission for Expanding SSO IDs is done via a pull down at the top of the permissions page, and not just added as a regular permission (i.e. the checkbox method) ?

-- Is there a way to add it to other roles (i.e. if someone has created a designated API Role)?

-- Also, what is the Community Manager role?

image.png


Thanks