Agents

Profiles decide what an enrolled agent device may do. Each grant names one service and one resource.