This is particularly required in entry capabilities since these are granted by default to students and as such generate a warning in the security report.

Capabilities affected:
mod/dataform:managefilters
mod/dataform:manageaccess
mod/dataform:managenotifications
mod/dataform:managecss
mod/dataform:managetools
mod/dataform:entryearlyadd
mod/dataform:entrylateadd
mod/dataform:entryownadd
mod/dataform:entrygroupadd
mod/dataform:entryanyadd
mod/dataform:entryanonymousadd