access: marked with '=' inherited access level
It's important to distigwish to understand if
user has "personal" access level or "inherited" AL
(i.e. calculated from AL of groups the user belongs to).
As otherwise it's far from obvious if for example change
AL for the sameEnterprise to Blocked and see that
some users got blocked state (as they didn't have personal
AL) while other didn't (whose personal AL prevails).
The official client has dedicated screen on AL,
but we don't, so such euristics...