Replies: 0
Just an observation to newbies of this plugin such as myself, the root visibility has nothing to do with authorized endpoints.
Meaning: if we only select “Rest API Root” for a user role, the user will be able to see all endpoints but cannot use any of them.
On the other hand, if we check everything but “Rest API Root”, the user will have access to everything but won’t be able to see the list of all endpoints in /wp-json/