Okta and xpack "Basic" subscription limitation clarification

If one has only the free "Basic" subscription for elasticsearch 7.x, what restrictions would they have if their userbase logs into Kibana via SAML and Okta?
Is the limitation that all users from that realm would essentially end up as the same role? Meaning you would not be able to restrict certain users or groups from reading certain indices?
Or would this just not work at all with a SAML/Okta login realm in the "Basic" subscription?

I guess I am seeking clarification on exactly what functionality restriction I can expect with a SAML/Okta Kibana use case and the security features of the "Basic" subscription.

SAML is not supported as part of the basic tier so it would not work at all.

Thank you.