Hello again, I have another doubt but this time it related to permissions. I have disabled all the default policies but for the

Asset Owners - Metadata Policy

which grants all metadata privileges ONLY for assets owners. I also have created one group, which has 2 users inside: one with read role and the other with edit role. After adding the group as the owner of a dataset, the read user is able to add glossary terms, domains, .... Is this correct?? Shouldn't roles be over policies??

There is no Deny option here. Only Allow. So it is additive

Out of curiosity, are there any plans on changing this behaviour or adding that "deny" option??

There is nothing on the roadmap currently. But you can always use the link in #feature-requests page to raise a feature request. If there is enough interest it can go on roadmap