True or False?

Using SAS Management Console, you can deny a permission to a group, but you cannot deny a capability to a role.