The body is an access-configuration document whose attributes.assignments lists the grants to upsert: each names a principal (principal-type user or group, principal-id, and optionally principal-id-type to identify a user by email or employee-id, or a group by group-external-id) and the access-level to hold (view, update, manage or full-control). A principal that already has a grant is moved to the new level; principals not listed are left untouched; the request is idempotent. Per-principal problems (unknown principal, invalid level) do not fail the request: the valid subset is applied and every principal's outcome is reported in meta.results, with meta.status successful or completed-with-errors. The data array holds the assignments that were applied.

Required Scope