action

Specifies whether this update is to add or revoke role permissions.