Can a managed-space role allow members to create and publish bookmarks while limiting their ability to create or publish worksheets? I am looking for a practical governance pattern.