AccessGroups REPLACES the org's named access groups, as group name -> channel -> entries. Absent or null leaves them alone.
Map<String, Map<String, List<String>>> accessGroups;