Well known roles are defined in Part 3.
Do we need the formal definition for the nodes in Part 18?

Proposal:
In Part 3 - 4.8.2 Well Known Roles:
add a Table for Default Mappings that describes which IdentityMappingRules are implicitly added for certain Well-Known-Roles:

Anonymous -> add identity mapping for Anonymous and AuthenticatedUser
AuthenticatedUser -> add identity mapping for AuthenticatedUser

see screenshot for sample

anonymous.png (89,899 bytes)   

anonymous.png (89,899 bytes)   

authenticated.png (87,228 bytes)   

authenticated.png (87,228 bytes)   

Discused in UA meeting:

Add figure that shows the RoleSetType and the use in the Server object.

Add RoleSet table with the well known roles

Add recommended defaults.

Added new chapter 4.3 RoleSet
Added table with well known roles in a RoleSet object

Added following text:
The default Identities for the Anonymous Role should be Identities with the criteriaType IdentityCriteriaType.Anonymous and the criteriaType IdentityCriteriaType.AuthenticatedUser.
The default Identities for the AuthenticatedUser Role should be an identity with the criteriaType IdentityCriteriaType.AuthenticatedUser.

OPC 10000-18 - UA Specification Part 18 - User Authentication 1.05.0 Draft5.docx

Agreed to changes edited in Telecon.