- I have added new roles (usually created through API)
- I go to access tab of "extranet_home" template
- I add view permission for these new roles for that template
- I test this and user cannot access extranet home page.
Or other solution (not sure if I understand all the side effects): remove view permission all together. There is no create page permission either, only setting on access tab.