Manager or admin access required to configure grant settings.