The permission holder.
The permission holder type. This must be "Group" or "AccountId".
The permission holder value. This must be a group name if the type is "Group" or an account ID if the type is "AccountId".
The permission holder.