What permission to configure for the roles so that users can view the specified target in boundary desktop client

I have configured the roles and mapped to the users , currently the user only able to view the specified project and target in the webpage. But from the boundary desktop client, they not able to view any single host.

Kindly let me know which role permission to grant for this. Thank you.