SpaceAccessGrantVia

UserRoleBinding = granted directly to the user; SpaceAccessGroup = granted through that group.