AccessGrant specs passing