Update Access Profile

Rules that determine which users an access profile applies to. When both groups and current_team are set, they combine with OR: a user matches if they pass either the group criteria or the current-team criteria. Excluded groups are hard-deny and short-circuit regardless.

The grants (resources and workflows) provided by an access profile.

An access profile defines which entitlements are available to which groups of users, and which workflows apply.