A role grant giving a user access to a space, either directly or via a group they belong to.