add guards for cluster and backup where access_grants is included