EUCA-5512, added canonical ids, also ability to assign acls by email address