Separate who can grant from who can act

· Dev.to