Inserts or updates per-user permission grants for a member of the authenticated caller's organization. Each item sets one permission (by permissions.id) to enabled or disabled; permissions not listed are left unchanged. The caller cannot update their own permissions or an account owner's. Effective permissions are the union of role grants and enabled per-user grants — disabling a permission here does not revoke it from a role. Returns every per-user grant stored for the member.