AccessReasons: {
    groups: string[];
    person?: SHA256IdHash<Person>;
}