BTW I would not make filtering by "team" (or ownership) part of the API signature, I think it should happen as an implicit part of the filtering based on authenticated user.