var removedPermissions: OptionalInput<List<ID>>

Ids of permissions to remove, must be disjoint with addedPermissions. There must always be at least one permissions granting ADMIN to some GropiusUser left.