E.g. "user:user@email.com"

E.g. "org:<uuid>" or "org:*" for support acccess permission

E.g. "read" or "write"