SENTRY-342 grant check with grant option